Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32342d3234203d3e203436303233.roa
File:                     3130332e37352e35342e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          BSqOBaWfJQqz33lACDAWl5BBUo8xhKyti0YdsIQS7aQ=
Subject key identifier:   73:AE:35:31:10:9B:B3:A5:6B:5E:9C:FA:97:1E:73:81:C4:A3:8D:CE
Certificate issuer:       /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
Certificate serial:       0C1B2E77A9F88EB0A3345D2CA348A2B8DAACD42F
Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32342d3234203d3e203436303233.roa
Signing time:             Wed 13 Nov 2024 09:19:26 +0000
ROA not before:           Wed 13 Nov 2024 09:14:26 +0000
ROA not after:            Wed 12 Nov 2025 09:19:26 +0000
asID:                     46023
IP address blocks:        103.75.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl
                          rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1b:2e:77:a9:f8:8e:b0:a3:34:5d:2c:a3:48:a2:b8:da:ac:d4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A
        Validity
            Not Before: Nov 13 09:14:26 2024 GMT
            Not After : Nov 12 09:19:26 2025 GMT
        Subject: CN=73AE3531109BB3A56B5E9CFA971E7381C4A38DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:35:02:b9:3b:23:09:f5:de:8a:31:0e:66:
                    33:62:63:b0:12:c2:ac:6d:9b:89:6e:c5:1a:50:38:
                    45:de:17:14:e1:2c:42:2c:b4:17:0f:87:8a:56:7d:
                    da:2a:d6:a5:9d:10:5b:27:54:3f:ac:7e:21:e2:ef:
                    96:44:aa:9f:df:76:5e:d5:a3:20:43:56:23:cc:c4:
                    02:00:f0:45:fa:90:b5:02:07:96:06:bf:c7:ef:31:
                    8e:f8:f9:9e:94:19:45:f6:c7:13:19:a5:1d:02:2c:
                    60:0b:3d:ae:64:02:8e:68:fe:ea:55:51:6f:cf:f5:
                    bb:4a:63:7c:0b:5e:8f:51:b5:d8:c8:ea:bf:cf:93:
                    ff:4b:7d:fe:36:98:51:20:b6:19:cd:20:14:8d:ee:
                    d0:af:68:5b:05:0b:be:06:61:fe:d6:13:ad:52:ab:
                    46:e4:cd:4e:40:3e:35:f7:62:d1:e5:c4:a3:f9:d5:
                    ae:54:8a:1f:1d:1e:28:24:08:75:14:02:25:26:6c:
                    cf:9d:b0:70:1f:be:7e:c6:f4:f2:15:df:5c:40:5f:
                    b0:5f:d8:d1:19:e7:72:67:bf:14:f5:bf:77:33:3c:
                    83:c7:bf:e9:cb:c1:db:e9:d9:cb:1d:eb:52:b9:e8:
                    ad:dc:48:f7:30:40:34:92:fe:5b:c8:7c:5d:ac:82:
                    59:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AE:35:31:10:9B:B3:A5:6B:5E:9C:FA:97:1E:73:81:C4:A3:8D:CE
            X509v3 Authority Key Identifier:
                keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35342e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:2e:da:c2:11:ca:e3:9d:76:61:73:70:42:a1:55:53:8c:e7:
         5e:32:2e:92:57:f0:0c:5a:3f:49:40:f3:84:92:6c:6b:7f:70:
         4e:85:2e:e4:2e:cc:6e:39:8a:bf:03:32:89:38:68:cd:56:a5:
         f4:bd:9f:4c:47:84:00:c7:82:77:2b:30:af:d5:f0:36:58:7c:
         6c:84:bf:cc:55:02:b1:f5:ba:13:fc:d8:97:86:68:a3:32:eb:
         90:bb:d2:c2:ec:f8:cd:a5:f9:c6:ba:f7:a5:1e:91:b2:de:cc:
         cb:7b:a3:3d:8f:74:9f:26:ca:57:e2:9c:2e:56:9a:af:03:09:
         32:6a:33:8d:77:dd:6e:08:14:07:14:c4:e4:48:51:9e:f7:71:
         f7:c0:21:67:a6:4a:84:9f:4b:bd:68:12:89:d6:1a:02:41:24:
         e6:15:74:2c:b2:42:9f:ae:8b:49:ca:01:13:b0:b8:16:b4:97:
         6c:50:c6:d0:85:a5:93:d0:30:bb:8b:19:8a:54:76:8c:79:18:
         fc:10:c0:5e:83:fd:a3:88:57:4f:0d:03:f4:95:b5:73:f5:e8:
         8c:22:b5:52:45:51:4b:c0:d0:4e:fa:db:62:80:91:0d:70:fd:
         3c:c3:a6:ef:4b:04:a2:45:f6:ce:94:02:9c:c5:e4:13:01:fc:
         4a:f6:d6:77
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUDBsud6n4jrCjNF0so0iiuNqs1C8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD
MDNCNEQyQTAeFw0yNDExMTMwOTE0MjZaFw0yNTExMTIwOTE5MjZaMDMxMTAvBgNV
BAMTKDczQUUzNTMxMTA5QkIzQTU2QjVFOUNGQTk3MUU3MzgxQzRBMzhEQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzTUCuTsjCfXeijEOZjNiY7AS
wqxtm4luxRpQOEXeFxThLEIstBcPh4pWfdoq1qWdEFsnVD+sfiHi75ZEqp/fdl7V
oyBDViPMxAIA8EX6kLUCB5YGv8fvMY74+Z6UGUX2xxMZpR0CLGALPa5kAo5o/upV
UW/P9btKY3wLXo9RtdjI6r/Pk/9Lff42mFEgthnNIBSN7tCvaFsFC74GYf7WE61S
q0bkzU5APjX3YtHlxKP51a5Uih8dHigkCHUUAiUmbM+dsHAfvn7G9PIV31xAX7Bf
2NEZ53JnvxT1v3czPIPHv+nLwdvp2csd61K56K3cSPcwQDSS/lvIfF2sglnpAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUc641MRCbs6VrXpz6lx5zgcSjjc4wHwYDVR0j
BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC
NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC
NEQyQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I2ZTUwNGM1LWQ3YmEtNGZlOS05
ZTU2LTc5MmRjMDFhOTdjYi8wLzMxMzAzMzJlMzczNTJlMzUzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzYzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnSzYwDQYJKoZIhvcN
AQELBQADggEBAD4u2sIRyuOddmFzcEKhVVOM514yLpJX8AxaP0lA84SSbGt/cE6F
LuQuzG45ir8DMok4aM1WpfS9n0xHhADHgncrMK/V8DZYfGyEv8xVArH1uhP82JeG
aKMy65C70sLs+M2l+ca696UekbLezMt7oz2PdJ8mylfinC5Wmq8DCTJqM4133W4I
FAcUxORIUZ73cffAIWemSoSfS71oEonWGgJBJOYVdCyyQp+ui0nKAROwuBa0l2xQ
xtCFpZPQMLuLGYpUdox5GPwQwF6D/aOIV08NA/SVtXP16IwitVJFUUvA0E7622KA
kQ1w/TzDpu9LBKJF9s6UApzF5BMB/Er21nc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org